Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: elSGIgLTydrnxsa6K1JK5y3j5Rh/4gL01eTGmSGfvi4=
Subject key identifier: C7:8B:07:6A:C3:44:79:E1:B3:E3:C9:75:DC:BE:87:F8:13:52:A2:7D
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 019511A2F82FF070F31D997E757FDCABC8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 075F
Signing time: Mon 17 Feb 2025 02:00:47 +0000
Manifest this update: Mon 17 Feb 2025 02:00:47 +0000
Manifest next update: Tue 18 Feb 2025 02:00:47 +0000
Files and hashes: 1: 2YmJTcAs1uemHQPUBr03G1oF2-o.roa (hash: pPzIg/QViF6nnNM/CzGYm2r3D8l+qUVLVDXD+71JZMM=)
2: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: x12Y0q0BaZVelkyw7sHnkx25WdMtXd1BVFhll6yKyZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:f8:2f:f0:70:f3:1d:99:7e:75:7f:dc:ab:c8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Feb 17 02:00:47 2025 GMT
Not After : Feb 18 02:00:47 2025 GMT
Subject: CN=c78b076ac34479e1b3e3c975dcbe87f81352a27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:21:10:77:3f:96:7b:e7:ca:e1:aa:87:23:
20:70:49:1e:83:66:04:bf:3f:17:3d:56:af:83:ae:
0d:4e:c1:15:56:59:20:72:94:19:3f:c8:a5:d0:e1:
d1:2c:ec:b6:04:5e:58:1e:04:c6:f3:cb:7b:4c:44:
18:52:7a:40:75:19:cb:93:23:26:b9:ce:be:6f:e4:
e6:aa:d2:e6:3a:78:f7:c2:84:92:57:bf:8e:d1:5c:
53:3a:0f:94:35:b2:72:7f:b5:fd:d3:0b:e9:63:4f:
78:1b:59:20:89:0d:c0:99:f8:29:ac:e2:c0:a3:76:
5a:1f:e2:75:fb:78:2b:4e:cb:9e:3d:6f:9a:5b:da:
0e:d2:07:2b:87:80:1a:2c:6d:21:49:ad:03:c3:c4:
c6:71:37:2f:43:7e:45:3e:b1:01:42:24:1f:78:3d:
d0:98:9f:3a:ae:76:6f:54:7f:b5:34:0a:7c:d6:d4:
63:29:b7:24:f9:7e:ea:35:a4:8c:13:3c:81:10:b6:
1b:b6:fb:c2:8a:ce:bb:1a:0e:1c:0a:c0:91:2c:ba:
c8:25:77:5f:5b:7e:b0:7f:8d:9c:75:b8:e2:5a:8b:
1d:f5:ff:1d:49:1c:5f:07:a3:63:15:db:32:be:15:
38:3b:9f:97:d4:bf:33:58:da:00:01:a5:f0:99:80:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8B:07:6A:C3:44:79:E1:B3:E3:C9:75:DC:BE:87:F8:13:52:A2:7D
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a5:a1:60:6f:68:22:2b:e2:59:c2:fe:73:54:de:eb:b8:0e:
e0:f8:f6:e0:7b:a3:96:c3:76:3a:f3:b7:d4:bc:f2:32:63:3d:
a9:7a:f8:6f:c5:22:47:ca:47:01:28:6a:72:56:a8:82:85:35:
ca:8e:82:94:68:10:9a:5e:f6:99:de:f4:3a:87:37:9b:35:61:
f9:f0:2f:cc:9c:ca:ac:f5:d4:cb:c8:66:58:f8:b2:c5:a0:b9:
bf:b0:7b:5c:42:67:50:09:43:58:5e:96:57:ba:72:03:0a:3f:
02:d0:c5:33:cf:9c:53:89:37:da:9f:f2:80:10:be:63:56:b6:
53:03:2a:69:f8:fe:b5:d9:5e:d1:7e:1a:f9:33:9f:5f:21:44:
33:c1:b4:51:fd:1c:01:f8:9e:e7:c9:b6:c5:1e:74:b3:dd:d7:
15:e4:78:2c:e7:ad:da:b5:b0:09:fd:65:88:15:92:29:17:05:
4e:c9:0e:5c:6c:08:c5:5a:c0:d8:4f:57:25:86:ed:8e:2d:50:
86:e2:49:5f:6a:73:56:29:b1:f2:cd:16:ff:5f:9a:a3:da:f7:
39:44:68:25:3b:2b:d6:84:7d:7d:d7:3e:a9:38:d5:25:93:33:
5d:92:f0:b3:68:d4:b8:36:ed:f2:a0:b6:77:8b:cf:18:a9:77:
6d:5f:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:46 2025 by rpki-client